NGenFix is a Norman program utility that may be used to detect and remove specific malicious software (malware).
Note that it should not be used as a substitute for running normal proactive antivirus protection, but rather as a reactive tool to handle systems that are already infected.
By downloading and running the program below it will clean an infected system completely:
kill running processes that are infected
remove infections from disk (including ActiveX components and browser helper objects)
restore correct registry values
remove references created by malware in hosts file
remove windows firewall rules for malicious programs
NGenFix-switches
/scan Specify file/folder to scan
/exclude Specify file/folder to exclude
/run Start scanning automatically
/quiet Don’t display GUI
/log Specify log file
/noclean Skip the cleaning process
/nops Skip process scanning
/nounpack Skip archive scanning
/? List switches
System requirements
Supported operating systems are: Windows 98, Me, NT, 2000, XP and 2003
Operating systems not supported is: Windows 95
Note
To give NGenfix the best working conditions possible, we recommend that you start the computer in Safe mode before running the fix. To do this, tap the F8 key on your keyboard during startup, before Windows starts, and select Safe mode from the menu that appears.
Pressing the F8 key at just the right time may be a little difficult (after the firmware POST process completes, but before Windows displays graphical output). If the F8 method does not work, repeat the procedure, but press the F8 key more quickly, or press it several times.
On some (older) computers, the F8 key method may not work. In these Windows versions you may also configure your computer to start in Safe mode through the System Configuration Utility (msconfig).
In some cases NGenfix may require that you restart the computer to completely remove an infection
Malicious software covered
NGenfix covers cleaning of all known variants of the following families up to:
2006.05.31
Agent
Bagle
Blaster
Dloader
Dumaru
Feebs
Lovgate
Mitglied
Mydoom
Mytob
Navipromo
Netsky
Newdotnet
Renos
Sasser
Sdbot
Sircam
Small.KI
Sober
Sobig
Spyaxe
Spybot
Spywad
Swen
Yaha
Zafi
Zlob
Zotob